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Top Stories 

• Between 20 and 30 cars derailed near Amarillo, Texas, after 3 freight trains collided, 
injuring 4 crew members. - Associated Press (See item 8) 

• A power failure shut down the Metro-North Railroad and Amtrak service north of New 
York City, forcing tens of thousands of commuters to cope with jammed, delayed trains or 
long alternative routes to work. - Wall Street Journal (See item 1A) 

• Authorities recaptured a California prison inmate at his home in Jessieville, Arkansas, after 
he escaped 36 years ago. - Reuters (See item 29 ) 

• Kaspersky released a report on an advanced persistent threat cyberespionage campaign 
dubbed Icefog that has been targeting a variety of industrial, government, and 
communications organizations since 2011. - Softpedia (See item 30 ) 
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Energy Sector 



1. September 25, Minneapolis Star-Tribune - (Minnesota) State regulators approve 
$430M upgrade to coal plant in Cohasset. The Boswell Unit 4 in Cohasset was 
approved by the Minnesota utilities commission for a 3-year, $430 million upgrade 
slated to being fall 2013. The upgrade will bring the 5 85 -megawatt generator into 
compliance with State and federal regulations to reduce smokestack emissions of 
mercury. 

Source: http://www.startribune.com/business/225241691.html 
For another story, see item 13 
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Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

2. September 26, Cars.com - (National) Recall alert: 2006-2010 Infiniti M. Nissan 
announced a recall of about 98,300 model year 2006-2010 Infiniti M sedan vehicles 
due to an issue with the accelerator pedal assembly and engine control module that 
could lead to the vehicle going into a fail-safe mode or cause the engine to stop 
running. 

Source: http ://blogs .cars .com/kickingtires/20 1 3/09/recall- alert-2006-20 1 0-infiniti- 
m.html 



For another story, see item 30 
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Defense Industrial Base Sector 



See item 30 
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Financial Services Sector 



3. September 25, U.S. Attorney ’s Office, Northern District of Illinois; Federal Bureau of 
Investigation - (Illinois) Ten defendants indicted in alleged $14.5 million mortgage 
fraud scheme that resulted in $8 million loss to lenders. Ten individuals were 
indicted for allegedly running a $14.5 million mortgage fraud scheme that used straw 
buyers to obtain mortgage loans for properties primarily in Chicago’s south and west 
sides, causing at least $8 million in losses to lenders. An eleventh individual was 
charged separately in connection to the scheme. 

Source: http://www.fbi.gov/chicago/press-releases/2013/ten-defendants-indicted-in- 
alleged-14.5-million-mortgage-fraud-scheme-that-resulted-in-8-million-loss-to-lenders 

For another story, see item 22 
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Transportation Systems Sector 

4. September 26, WHNS 21 Greenville - (South Carolina) 1-85 back open after fatal 
crash in Spartanburg Co. A fatal crash involving a semi-truck and two other vehicles 
shut down southbound Interstate 85 in Spartanburg County for several hours September 
26. 

Source: http://www.foxcarolina.com/storv/23531642/ems-2-dead-5-trapped-after- 
accident-on-i-85 

5. September 26, Omaha World Herald - (Nebraska) Authorities ID Ashland couple 
critically injured in Weeping Water crash. An accident shut down Nebraska 
Highway 50 near Weeping Water for more than 5 hours September 25. 

Source: http://www.omaha.com/article/20 1 30925/NEW S/1 30929 157 

6. September 25, Cummin g Patch - (Georgia) Tanker full of cooking oil overturns, lane 
closure expected. An overturned semi-truck hauling animal fat crashed and spilled into 
a marshy area that feeds into Lake Lanier in Forsyth County. Due to the incidents 
proximity to Lake Lanier, the accident will require a lane closure on Highway 369 
eastbound for 2 or 3 days. 

Source: http://curnming.patch.com/ groups/police-and-fire/p/tanker-full-of-cooking-oil- 
overturns-lane-closure-expected 

7. September 25, KBTX 3 Bryan - (Texas) Multiple Highway 6 wrecks cause traffic 
backups in Bryan. Multiple wrecks closed Highway 6 in Bryan for 2 hours September 
25. 

Source: http://www.kbtx.com/news/local/headlines/Multiple-Highway-6-Wrecks- 
Cause-Traffic-Backups-in-Bryan-225195302.html 

8. September 25, Associated Press - (Texas) 3 freight trains collide in Texas, 4 crew 
hurt. Between 20 and 30 cars derailed near Amarillo after 3 freight trains collided. 
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Four crew members were injured and authorities said there was no immediate timetable 
as to when the tracks will be cleared. 

Source: http://www.kansascity.com/2013/09/25/4506772/3-bnsf-trains-in-collision- 
near.html 



9. September 25, Delaware State News - (Delaware) Wilmington woman dies in Dover 
toll plaza crash. A fatal accident closed the Delaware Route 1 southbound toll plaza in 
Dover for 2 hours September 25. 

Source: http://delaware.newszap.com/centraldelaware/125893-70/wilmington-woman- 
dies-in-dover-toll-plaza-crash 

10. September 25, WWMT 3 Kalamazoo - (Michigan) Deadly semi-truck crash claims 
life of West Michigan man. A fatal head-on collision involving two semi-trucks 
closed Interstate 196 in Casco Township for several hours September 25. 

Source: http://wwmt.com/shared/news/features/top-stories/stories/wwmt deadly- 
semitruck-crash-claims-life-west-michigan-man-14035.shtml 

11. September 25, Half Moon Bay Review - (California) Crash kills one near La Honda. 
An overturned truck shut down traffic on Highway 84 near La Honda for nearly 3 hours 
September 25. 

Source: http ://w w w . hmbrevie w . com/new s/crash-kills -one-near-la- 
honda/article 06b9a31e-262d-l Ie3-acfd-001a4bcf887a.html 

12. September 25, Fond du Lac Reporter - (Wisconsin) Sag forces closure of Green Bay 
bridge. The Leo Frigo Memorial Bridge, which carries Interstate 43 over the Fox River 
on the north side of Green Bay was closed indefinitely after a 400-foot long dip in the 
pavement was discovered September 25. 

Source: http://www.fdlreporter.com/article/20130925/FON0101/30925050Q/Sag- 
forces-closure-Green-Bay-bridge 

13. September 25, Wall Street Journal - (New York) Power failure hits Metro-North, 
Amtrak. A power failure shut down the Metro-North Railroad and Amtrak service 
north of New York City, forcing tens of thousands of commuters to cope with jammed, 
delayed trains or long alternative routes to work. Officials from Con Edison reported 
that it could take as long as 2 to 3 weeks to restore electricity to the section of overhead 
wires at Mount Vernon where a 138-kilovolt feeder line failed. 

Source: 

http://online.wsi.eom/article/SB10001424052702303796404579097793898983768.htm 

1 

14. September 25, WGN-TV 9 Chicago - (Illinois ) 1 dead in small plane crash in 
Bolingbrook. A small plane crashed into a tree, a light pole and then several vehicles 
near a bank in Bolingbrook September 25. One person was killed. 

Source: http://wgntv.com/2013/09/25/small-plane-crashes-in-bolingbrook/ 

15. September 24, Alaska Dispatch - (Alaska) iPhone map app directs Fairbanks 
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drivers on airport taxi way. At least twice in the past 3 weeks, drivers from outside of 
Fairbanks unknowingly crossed the runway and drove to the ramp side of the passenger 
terminal at the Fairbanks International Airport while following directions from iPhones. 
Airport authorities closed the aircraft access route and Apple officials have said that the 
map application would be fixed by September 25. 

Source: http://www.alaskadispatch.com/article/20130924/iphone-map-app-directs- 
fairbanks-drivers-airport-taxiway 
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Food and Agriculture Sector 

16. September 26, Food Safety News - (California) Marin County officials confirm three 
E. coli cases, cause still unknown. Marin County health department officials stated 
that there have been 3 confirmed E. coli cases and a possible fourth in the area. No 
source for the infection has yet been found. 

Source: http://www.foodsafetvnews.com/2013/09/cause-still-unknown-in-suspected-e- 
coli-outbreak-in-marin-county/ 

17. September 25, Food Safety News - (Wisconsin) Garden Fresh Foods recalling 
Ready-to-Eat Chicken, Ham for possible Listeria contamination. More than 19,000 
pounds of ready-to-eat chicken and ham products were recalled by Garden Fresh Foods 
due to possible contamination with Listeria monocytogenes. 

Source: http://www.foodsafetvnews.com/2013/09/garden-fresh-foods-recalling-ready- 
to-eat-chicken-ham-products-for-listeria 

18. September 25, U.S. Food Safety and Inspection Service - (Washington) Oregon firm 
recalls meat and poultry ravioli products produced without benefit of inspection. 
An undetermined amount of raw and frozen meat and poultry “pelmeni” have been 
recalled by Portland-based Siberoni because the products were produced without the 
benefit of inspection. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archive/2013/recall-053-2013-release-exp 
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Water and Wastewater Systems Sector 

19. September 24, Peoria Journal Star - (Illinois) Syrup spill possible cause of Spoon 
River fish kill. A 400-count fish kill in the Spoon River at a dam in Bemadotte may 
have been caused by corn syrup leaking from railcars that fell into the river after a 
trestle bridge collapsed September 16, according to officials. The fish died from an 
apparent low oxygen level. 

Source: http://www.pistar.com/news/xll55164830/Hundreds-of-dead-fish-reported-in- 
Spoon-River 



-5 - 



For another story, see item 23 
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Healthcare and Public Health Sector 

20. September 26, Softpedia - (Missouri) MO HealthNet suffers data breach, over 
25,000 individuals notified. Missouri’s Medicaid program, MO HealthNet, notified 
over 25,000 people that their personal information may have been mailed to an 
incorrect address between December 2009 and June 2013 by Infocrossing, Inc., an 
organization contractor. A computer system error was blamed for the breach and has 
since been fixed. 

Source: http://news.softpedia.com/news/MO-HealthNet-Suffers-Data-Breach-Over-25- 
000-Individuals-Notified-386512.shtml 



21. September 25, U.S. Department of Labor - (New York) US Labor Department’s 
OSHA cites Long Island, NY, nursing care facility for 11 health and safety 
hazards; proposes $41,000 in fines. Avalon Gardens Rehabilitation & Health Care 
Center Inc. in Smithtown was cited by the U.S. Department of Labor’s Occupational 
Safety and Health Administration for 11 violations of workplace health and safety 
standards and a proposed fined of $41,000 following an inspection. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=24858 

22. September 24, WFOR 4 Miami - (Florida) Holy Cross Hospital informs former 
patients of data breach. Holy Cross Hospital in Ft. Fauderdale notified 9,900 patients 
that their personal information may have been inappropriately accessed by a former 
employee from November 2011 and August 2013. The hospital terminated the 
employee after discovering the information was accessed to allegedly file fraudulent 
tax returns. 

Source: http://miarm.cbslocal.com/2013/09/24/holy-cross-hospitals-inform-former- 
patients-of-data-breach/ 
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Government Facilities Sector 

23. September 26, Juneau Empire - (Alaska) CCTHITA: Burglars stole $20K worth of 
items, caused Tuesday fuel leak. Thieves stole about $20,000 worth of equipment and 
supplies from the Central Council of Tlingit and Haida Indian Tribes of Alaska 
warehouse, causing a 275-gallon fuel tank to sever and spill fuel down a drain leading 
to the Mendenhall Wastewater Treatment Plant. Cleanup is near completion after the 
leak disrupted the wastewater treatment process September 24. 

Source: http://iuneauempire.com/local/2013-09-25/ccthita-burglars-stole-20k-worth- 
items-caused-tuesday-fuel-leak 

24. September 25, WCNC 36 Charlotte - (North Carolina) Police: Monroe man 
threatened to kill judge. A man was arrested September 25 while in Rockingham 
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County court for threatening to kill the judge during his hearing on separate charges. 
Source: http://www.wcnc.com/news/crime/Police-Monroe-man-threatens-to-kill-iudge- 
225273862.html 



25. September 25, Associated Press - (Michigan) Ferris State University ends data 
security breach probe. Ferris State University in Big Rapids stated September 24 that 
an investigation found no evidence that information was taken in a July 23 data breach 
when an unauthorized person evaded network security and gained access to a computer 
used to operate their Web site, putting 62,000 individuals at risk. The university closed 
the investigation but continues to review its information technology systems to 
determine how they can improve their computer systems. 

Source: 

http://www.detroitnews.corn/article/20130925/SCHOOLS/309250057/1361/Ferris- 

State-Universitv-ends-data-security-breach-probe 

26. September 25, Clarksville Leaf-Chronicle - (Tennessee) APSU University Center 
evacuated to investigate smoke. The Austin Peay State University Center in 
Clarksville was evacuated for nearly 3 hours September 25 while crews investigated 
smoke in the building. Firefighters determined the smoke came from work being done 
on the roof. 

Source: http://www.theleafchronicle.com/article/20130925/NEWS01/309250014 

27. September 25, Associated Press - (California) LA students breach school iPads’ 
security. Los Angeles United School District officials stopped a program aimed at 
giving students iPads after students from Roosevelt High and two other Los Angeles 
schools breached the security settings to browse the Internet and access social media 
sites. 

Source: http://www.elpasoinc.com/news/wire/hitech/article a66dcl08-906b-59f7- 
9b67-c52a7728dall.html 



28. September 25, Associated Press - (Oklahoma) Okla. teen found guilty in school 
shooting plot. A student was convicted for attempting to recruit classmates for a mass 
shooting and bomb attack at his Oklahoma school after a police officer found 
threatening notes in the student’s pockets and an investigation uncovered his attempt at 
obtaining a map of the school and using a school computer to search for a rifle. 

Source: http://news.msn.com/crime-iustice/okla-teen-found-guiltv-in-school-shooting- 
plot 

For another story, see item 30 
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Emergency Services Sector 

29. September 25, Reuters - (California; Arkansas) California prison escapee recaptured 
after 36 years. Authorities recaptured a California prison inmate September 25 at his 
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home in Jessieville, Arkansas, after he escaped 36 years ago. He became California’s 
longest sought fugitive inmate to be caught. 

Source: http://news.msn.com/crime-iustice/california-prison-escapee-recaptured-after- 
36-years 
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Information Technology Sector 

30. September 26, Softpedia - (International) Icefog cybercriminals launch hit and run 
attacks against high-profile organizations. Kaspersky released a report on an 
advanced persistent threat (APT) cyberespionage campaign dubbed Icefog that has 
been targeting a variety of organizations since 2011. The campaign targets military 
contractors, telecoms, maritime and shipbuilding organizations, satellite operators, 
media, governments, and high-tech companies mainly in Japan and South Korea but 
with some targets in the U.S. and several European and Asian countries. 

Source: http://news.softpedia.com/news/Icefog-Cybercriminals-Launch-Hit-and-Run- 
Attacks-Against-High-Profile-Organizations-386293.shtml 

3 1 . September 26, Softpedia - (International) New malware Napolar steals information, 
launches DDoS attacks. Researchers from Avast and ESET analyzed a new piece of 
malware dubbed Napolar, whose author is Solarbot, that is capable of stealing 
information and launching distributed denial of service (DDoS) attacks. The malware is 
being sold for $200 and is being distributed to targets through Facebook. 

Source: http://news.softpedia.com/news/New-Malware-Napolar-Steals-Information- 
Launches-DDQS-Attacks-386317.shtml 

32. September 26, V3.co.uk - (International) Microsoft uncovers Sefnit trojan return 
after Groupon click-fraud scam. Researchers at Microsoft discovered a new version 
of the Sefnit click fraud trojan being used as a botnet to defraud Groupon and other 
popular Web sites. 

Source: http://www.v3.co.uk/v3-uk/news/2297027/microsoft-uncovers-sefnit-troian- 
return-after-groupon-click-fraud-scam 

33. September 26, Softpedia - (International) Patches released to fix 4 XSS 
vulnerabilities in IP.Board 3.4.5 and IP.Gallery 5.0.5. Invision Power Services 
released patches to address four cross-site scripting (XSS) vulnerabilities in IP.Board 
3.3.4, IP.Board 3.4.5, IP.Gallery 4.2.1, and IP.Gallery 5.0.5. 

Source: http://news.softpedia.com/news/Patches-Released-to-Fix-4-XSS- 
Vulnerabilities-in-IP-Board-3-4-5-and-IP-Gallery-5-0-5-386478.shtml 

34. September 26, ZDNet - (International) Google Hangouts/GTalk glitch sends chats to 
wrong recipients. Some users of Google Hangouts and GTalk reported experiencing 
an issue September 26 where messages were being delivered to unintended recipients. 
Google reported that they were investigating the issues. 

Source: http://www.zdnet.com/google-hangoutsgtalk-glitch-sends-chats-to-wrong- 
recipients-7000021 195/ 
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35. September 25, Threatpost - (International) Javascript issue plagues Mailbox app for 
iOS. A security researcher found that the Mailbox app for iOS automatically executes 
any Javascript contained in an HTML email, presenting a security issue that could be 
taken advantage of to a variety of attacks. 

Source: http://threatpost.com/iavascript-issue-plagues-mailbox-app-for-ios 
For another story, see item 15 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: https://www.it-isac.org 
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Communications Sector 

36. September 26, WIS 10 Columbia - (South Carolina) Orangeburg Co. phone service 
restored. Frontier Communications restored cell and land phone service to residents in 
Orangeburg County September 26 after a fiber line was cut near Bowman September 
25. 

Source: http://www.live5news.com/story/23532150/phone-service-outage-reported-for- 
parts-of-orangeburg-county 

For another story, see item 30 
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Commercial Facilities Sector 

37. September 26, KCOY 12 Santa Maria - (California) Power outage prompts mall 
evacuations. A power outage occurred at the Santa Maria Town Center in Santa Maria 
after construction crews were working on a movie theater and accidentally struck a 
power line, which prompted the evacuation and closing of the shopping center for 
several hours September 25. 

Source: http://www.kcov.com/storv/23533047/power-outage-prompts-mall-evacuation 

38. September 25, Associated Press - (New York) Long Island gunman remains at 
large; SUY found. A gunman walked into a lighting fixture company in Long Island 
and opened fire, killing one employee and wounding another September 26. The search 
for the suspect is ongoing. 

Source: http://news.msn.com/crime-iustice/l-dead-in-long-island-shooting-gunman-at- 
large 

39. September 25, KXTV 10 Sacramento - (California) Gas leak damages Amazon 
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distribution center in Patterson. A portion of an Amazon distribution facility in 
Patterson was damaged by a gas leak which occurred in the parking lot on the property 
and ruptured the asphalt September 25. 

Source: http://www.news 10.net/news/local/article/258435/2/Gas-leak-damages- 
Amazon-distribution-center-in-Patterson- 



Dams Sector 

40. September 24, New Bedford Standard-Times - (Massachusetts) Coast Guard 

investigating accident that damaged hurricane barrier. The U S. Coast Guard is 
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investigating a September 19 incident in New Bedford where a barge struck and 
damaged a hurricane barrier, which caused substantial damage to the barrier’s fender 
protection system. 

Source: 

http://www.southcoasttoday.com/apps/pbcs.dll/article?AID=/20130924/NEWS/309240 
338/- 1/NEWS 
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DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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